Behavioral task
behavioral1
Sample
1928830x00000000002800000.exe
Resource
win7-20230621-en
General
-
Target
1928830x00000000002800000.dmp
-
Size
192KB
-
MD5
e70a50b7f3387fd7f0526d065a395a62
-
SHA1
db572a4f94136049f05a9316a087f744d68ef92e
-
SHA256
b33fac54b8aafacb20d159289016651dc171b3bb1063443fce2bf8368b7104fc
-
SHA512
80d3ef431bb9619d88fa2f7fe9e9b93d2b84e0ab84ee8fe1897723330d544888fd97cbfb6e07d4a23c859ae8fa95d0c71c6e76cd649d56a8448ae6c1fe345280
-
SSDEEP
3072:7ssCziRmKPvwL/2rSlllF+HxN6AtjJXOg8e8hB:7sHqXwaWlllF+CMXOg
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1928830x00000000002800000.dmp
Files
-
1928830x00000000002800000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ